?
Verification code
Disposable inbox · 12 live mail APIs
Create a temporary inbox in one click.
TempFox rotates across Catchmail, Mail.tm, Guerrilla Mail, TempMail.lol, Maildrop, InboxKitten, MailboxTemp, Getnada, ThrowawayMail, TempInbox, Harakirimail and Inboxes — every one verified working, with automatic fallback when a provider is offline.
—domains
—APIs
—online
Inbox 0
Waiting for mail
Listening for new mail
Detected verification codes appear as cards. Copy them into your verification form.
No inbox selected yet
Generate an address on the left and incoming messages will appear here, with automatic verification-code detection.
Web edition
TempFox settings
Configure API fallback, inbox monitoring, and verification-code detection. Mirrors the Firefox extension v4.5.3.
Mail API fallback
Choose a preferred service or let TempFox find a working API automatically.
Auto mode tries another API when one is unavailable.
You can still select a specific domain in the inbox view.
Try another provider if the selected one fails.
CatchmailTwo API routes
3 public domainsMail.tmAccount-based inbox
Live domains · .net availableGuerrilla MailAnonymous session API
11 public domainsTempMail.lolToken inbox API
31 selectable + rotating domainsMaildropOfficial no-auth GraphQL API
maildrop.cc · message deletionInboxKittenOpen-source GitHub project
inboxkitten.com · public inbox APIMailboxTempGitHub-documented REST API
Random domains · built-in OTP extractionGetnadaOfficial guest REST API
22 live public domains · token inboxThrowawayMailKeyless REST API for agents
throwawaymail.app · 10-minute mailboxesTempInboxDocumented public REST API
Domains list · create · fetch · deleteHarakirimailPublic REST API (GitHub-documented)
harakirimail.com · implicit inboxesInboxesPublic v2 API
inboxes.com · list, read, deleteConnection & CORS relay
Some mail APIs block cross-origin browser requests. When that happens, TempFox retries through a relay.
Direct requests are always tried first. Only blocked requests go through a relay.
Point to your own proxy, e.g.
https://your-site.example/relay?url=. Used before any public relay.
How it works
Open-CORS providers (Mail.tm, Guerrilla Mail, InboxKitten, Maildrop, MailboxTemp) connect directly from any host. Guerrilla Mail additionally has a JSONP fallback. The rest are reached through the relay chain: a same-origin relay (deploy the folder to Netlify — it auto-detects
/.netlify/functions/relay), then your custom relay. Deploying the included relay is the only way to use all 12 APIs from any host.
Inbox monitoring
Automatic checks keep the inbox fresh while this tab is open.
Every minute is recommended for time-sensitive verification codes.
Show the sender and subject when the active provider receives a message. Requires browser notification permission.
Signup credential generator
Generate a username and strong random password for each temporary inbox.
Longer passwords are stronger but some sites impose limits.
Uses broadly accepted symbols: ! @ # $ % & * _ -
Verification-code detection
Detect a code in messages from any provider and surface it as a one-tap copy card.
Numeric, mixed alphanumeric, and six-letter codes such as ABCDEF are supported, with calendar-year filtering.
Why no auto-paste here?
Websites cannot read or fill other tabs — only the TempFox Firefox extension can auto-paste detected codes into the active page. The web edition gives you a copy button instead. For full auto-paste, install the extension.
Privacy reminder
All included provider inboxes are temporary and unsuitable for sensitive accounts.
- Use temporary mail only for low-risk sign-ups, QA, and testing.
- Never receive banking data, recovery links, health records, or confidential documents.
- Generated addresses and read state stay in this browser's local storage.
- Email HTML is reduced to inert text; remote images, scripts, iframes, and tracking pixels are never loaded.
Reset local data
Forget generated inboxes, local history, detected OTP state, and settings stored in this browser.